Actually, this behaviour has not changed since db4. It was a change in the calling process (rpm) that (under my previous configuration) used to open the db as private, and now that configuration no longer applies. Fixed with http://lists.rpm.org/pipermail/rpm-maint/2012-April/003202.html